Guidance, with my first deb, I seekj
Jeff Bailey
jbailey at ubuntu.com
Sat May 28 08:17:44 CDT 2005
Le vendredi 27 mai 2005 à 21:48 -0700, Matt Zimmerman a écrit :
> > It looks like your i386 box doesn't have gnupg installed, or you have no
> > GPG key on that machine. When doing test builds, I normally build with
> > the -uc -us options to suppress signing.
>
> One Of These Days that really ought to become the default. Signing should
> be part of the upload process, not the build process.
I disagree - I like to know that an instance of the build that I have
sitting there is signed and stable - then I can scp it to someplace else
and be able to trust its integrity.
But that's also why I'd like to see package signing rather than archive
signing.
Tks,
Jeff Bailey
More information about the ubuntu-devel
mailing list